2 ms·
A lot of people will assume "hashed using SHA-1" means simply SHA1(salt + password) but in practice many password hashing libraries use SHA-1 with a work factor
by matthavener 15y ago
A lot of people will assume "hashed using SHA-1" means simply SHA1(salt + password) but in practice many password hashing libraries use SHA-1 with a work factor, similar to bcrypt. I think NIST currently requires at least 100,000 rounds of SHA-1.
- olsonjeffery 15y agoMy read of the original announcement on piratebay (sorry, link not handy) was that the group who made the release asserted that: 1) the passwords were unsalted 2) they had already recovered plaintext passwords has anyone followed up on this?
- trotsky 15y agohttp://news.ycombinator.com/item?id=2752711 http://news.ycombinator.com/item?id=2752711